442 matches found
impacket
Impacket Copyright Fortra, LLC y sus empresas afiliadas. Todos los derechos reservados. Impacket fue creado originalmente por SecureAuth, y actualmente mantenido por Fortra's Core Security. Impacket es una colección de clases de Python para trabajar con protocolos de red. Impacket se centra en...
impacket
Impacket Copyright Fortra, LLC y sus empresas afiliadas. Todos los derechos reservados. Impacket fue creado originalmente por SecureAuth, y actualmente es mantenido por Core Security de Fortra. Impacket es una colección de clases de Python para trabajar con protocolos de red. Impacket se centra e...
ldap_shell
LDAP shell Este proyecto es un fork de ldapshell de Impacket. Proporciona un shell interactivo para la enumeración y manipulación de Active Directory a través de los protocolos LDAP/LDAPS, siendo útil tanto para administradores de sistemas como para profesionales de seguridad. Instalación Estas...
latma
Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...
mobileiron-exploit
Tabshell exploit with Kerberos authentication Adapted from The OWASSRF + TabShell exploit chain First, patch the pyprsp module to enable WSManStackVersion downgrading, and install the dependencies root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching fil...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed the issue where krb5 mounts failed when the client tried to mount shares with incorrect credentials. It turned out that the client was reusing the SMB session from the first mount attempt, even though a differe...
CVE-2025-59390-
CVE-2025-59390- El POC adjunto le permitirá descifrar la firma Kerberos en Apache Druid y también cualquier número entero generado por ThreadLocalRandom Advisory - El autenticador Kerberos de Apache Druid utiliza un secreto de respaldo débil cuando la configuración...
BloodHound.py-Kerberos
这个 fork 是什么？！ 我需要一个支持 Kerberos 的 BloodHound，并找到了这条评论。事实证明，一直都有一个支持 Kerberos 认证的分支！我冒昧地将这个分支合并到了 master，以获得那些给力的 BloodHound 4.2+ 导出功能。所有功劳都归于真正编写这些代码的人: 注意 正如 Dirkjan 先生本人所说，这"还需要更多工作和测试"。它可能无法在所有情况下正常工作，因此如果你遇到任何问题，请报告，我们可以尝试修复。也许有一天我们可以将其作为 PR 提交到主仓库。 root@kitploit: $ python3...
Berserko
Berserko - Autenticación Kerberos para Burp Suite Publicado como código abierto por NCC Group Plc - http://www.nccgroup.trust/ Desarrollado por Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Publicado bajo AGPL, consulte LICENSE para obtener más...
CVE-2026-88007
Traefik versions 2.11.0 through 2.11.57 and 3.7.13 contain a backend connection reuse flaw in the HTTP/3 entrypoint. The ConnContext does not call service.AddTransportOnContext, causing kerberosRoundTripper to share a single backend transport across all frontend connections rather than using a de...
CVE-2026-75159
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...
CVE-2026-75159
CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...
CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...
MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: A null pointer dereference issue in destroyprevioussession has been fixed. If the -PreviousSessionId is set during the Kerberos session setup phase, a null pointer dereference error may occur. Since sess-user is not set ye...
CVE-2026-76403
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...
CVE-2026-76403
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...
CVE-2026-76403
Splunk Connect for Kafka versions below 2.2.7 are affected by an improper certificate validation flaw in the Kerberos authentication path . When Kerberos is used with the HTTP Event Collector in Splunk Enterprise, the HTTP client is built without applying the configured certificate validation opt...
CVE-2026-76403 Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...